from the critical-decisions dept

As Techdirt has reported on the increasingly active world of commercial spyware, one name in particular has cropped up several times: Gamma, with its FinFisher suite of spyware products. In October last year, we reported that Privacy International had filed a criminal complaint against the company with the National Cyber Crime Unit of the UK's National Crime Agency. There's no update on that move, but it seems that a parallel action has had more success (pdf):

British-German surveillance company Gamma has been condemned by a human rights watchdog for its failure to adhere to human rights and due diligence standards, after a two year investigation into the company's sale of surveillance technology to Bahrain.

Here's what Privacy International says was happening in Bahrain:

The complaint alleged that Gamma sold its notorious FinFisher intrusion software product to Bahrain as early as 2009, after which time it was used by the Bahraini government to violate the human rights of three Bahraini nationals and human rights activists, Ala'a Shehabi, Husain Abdulla and Shehab Hashem.

You're probably wondering what the penalty is if you are found in breach of human rights in this way -- clearly a serious matter. Well, here it is:

The Organisation for Economic Cooperation and Development’s UK National Contact Point (“"CP") concluded today that Gamma International should make changes to its business practices in order to ensure that in the future it respects the human rights of those affected by the surveillance technologies it sells.

Yes, you are told to do better next time. However, looking at things more positively, Privacy International points out:

Today's decision is the first time that the OECD has found a companies selling surveillance technologies to be in violation of human rights guidelines, and one of the most critical decisions ever issued by the OECD. In it, the NCP sets out in strong terms that Gamma has no human rights policies and due diligence processes that would protect against the abusive use of its products.

In other words, just as with the recent court victories against the UK government over its surveillance activities, what's important here is not so much the punishment -- or lack of it -- as the fact that for the first time a company selling invasive surveillance tools was condemned in this way. At the very least, it puts such companies on notice that they are being watched and will be hauled up before these kind of bodies for public shaming. Well, it's a start.

from the accessories-and-abettors dept

Techdirt has been reporting on the disturbing rise in the use of malware by governments around the world to spy on citizens. One name that keeps cropping up in this context is the FinFisher suite of spyware products from the British company Gamma. Its code was discovered masquerading as a Malay-language version of Mozilla Firefox, and is now at the center of a complaint filed in the UK:

Privacy International today has made a criminal complaint to the National Cyber Crime Unit of the National Crime Agency, urging the immediate investigation of the unlawful surveillance of three Bahraini activists living in the UK by Bahraini authorities using the intrusive malware FinFisher supplied by British company Gamma.

Here's why Privacy International is acting now:

While it's long been known that Gamma has provided surveillance capabilities to Bahrain, amongst other countries, the extent of Gamma's complicity in Bahrain's unlawful surveillance of individuals located abroad has only recently been confirmed. Two months ago, a number of internal Gamma documents were published revealing that Gamma is both aware of, and actively facilitating, the Bahraini regime's surveillance of targets located outside Bahrain through the provision of intrusion technology called FinFisher to the Bahraini authorities.

The analysis by Bahrain Watch clearly shows that, amongst the Gamma documents published online, those targeted by the Bahraini government with FinFisher technology were [the activists] Mohammed, Jaafar, and Saeed, along with prominent Bahraini opposition politicians, democracy activists and human rights lawyers.

Privacy International believes that this alleged surveillance of Bahraini activists while in the UK constitutes an unlawful interception of communications under the UK's Regulation of Investigatory Powers Act 2000 -- the infamous RIPA -- and further argues that Gamma is "liable as an accessory under the Accessories and Abettors Act 1861 and/or encouraged and assisted the offence under the Serious Crime Act 2007." If this reasoning is accepted, it could create an important precedent, at least in the UK.

from the building-a-martyr dept

No longer simply a clever story mechanic in a comic book, the Guy Fawkes mask featured in the film V For Vendetta is now a universal symbol of dissent. That dissent was depicted in the film to be primarily targeting overbearing governments and is also the reason many of the real world wearers don it. The very point of the mask, to me, is to at once remain anonymous while also breed solidarity with all who wear it. It says that the wrong being done is being done against all. In that way, the mask has become as sweet as it is admittedly creepy.

It's the fact that the point behind the mask was solidarity against oppression that made Dubai's move to outlaw the masks so misguided. But they are no longer the only nation to do so. Bahrain has now banned the import of the masks, trying desperately to stave off a 2-years running protest movement. The ban came from the country's commerce department, because apparently they don't think that masks can be made by their citizens. As The Independent noted:

Sadly, though, it is but a mask. And the thing about a masks is, you can print them, paint them or draw them yourself. Unless the minister plans to ban all such activity it seems an action as futile as the real Guy Fawkes's.

Not so much futile, in my opinion, as mega-back-firing. Bahrain has now perfectly exemplified an oppressive government by taking action against the symbol of resistance to that oppression. If they thought the masks bred solidarity, I'm guessing they haven't seen anything yet.